Re: Is DFU capability a part of the *ALLOBJ privlidge or can DFU be separately denied?

Dave - if the company you work for is publicly traded, then 2 words to
management
SARBANES-OXLEY
or is that one word.

If the company is NOT publicly traded - then my heart goes out to you



Alan Shore

NBTY, Inc
(631) 244-2000 ext. 5019
AShore@xxxxxxxx

midrange-l-bounces+alanshore=nbty.com@xxxxxxxxxxxx wrote on 01/03/2007
02:21:23 PM:

Joe,

You provided the thoroughness of answer I was looking for.   I, of
course, know what *ALLOBJ does but I've got a "political" situation
wherein I'd like to restrict DFU from someone that has WAY too much
authority (*ALLOBJ).

Being a person that cut their teeth on RACF, TOP SECRET, etc., in the
mainframe environment where security is taken SERIOUSLY, I'm well aware
too many people have WAY TOO MUCH authority, especially *ALLOBJ,
*SPLCTL, etc.   But until I can get management to take securing the
organization and customer data seriously and really limit special
privileges to only those that really need it,  I'll have to find ways to
"limit" actions, one command at a time... and, of course, take the
command line away.

Thanks again,

Dave
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.